Vulnerabilities

TI-2026-32434 CVE-2026-44500 · GHSA-438q-jx8f-cccv

ZEBRA: Allocation Amplification in Inbound Network Deserializers

LOW 30

ZEBRA is a Zcash node written entirely in Rust.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00362 Published 2026-05-08 Fixed in 6.0.0, 4.4.0 +1 CWE-770

TI-2026-30137 CVE-2026-41584 · GHSA-452v-w3gx-72wg

MEDIUM 45

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00268 Published 2026-05-08 Fixed in 4.3.1, 6.0.2 CWE-617

TI-2026-26497 CVE-2026-34202 · GHSA-qp6f-w4r3-h8wg

MEDIUM 47

ZEBRA is a Zcash node written entirely in Rust.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00792 Published 2026-03-31 Fixed in 4.3.0, 6.0.1 CWE-1336